Which of the two networks does the netmask apply to? If
the two private networks had different sized netmasks, how
should this be specified?

(to be honest I'm confused about why the gif device is needed at all, but an article in daemonnews said it was to make the routing work properly when using tunnel mode, and there were other ways to do it - but they didn't elaborate on what they were)